Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/9cPt2jlzH4Hy7uCX-AOEHj97EbU.roa
File:                     9cPt2jlzH4Hy7uCX-AOEHj97EbU.roa (raw, json)
Hash identifier:          nvawGgzTR8mVq0EowHDPAKZ+rsNLMdrZd2ufN0HL0tI=
Subject key identifier:   F5:C3:ED:DA:39:73:1F:81:F2:EE:E0:97:F8:03:84:1E:3F:7B:11:B5
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       64
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/9cPt2jlzH4Hy7uCX-AOEHj97EbU.roa
Signing time:             Sun 01 Oct 2023 01:29:03 +0000
ROA not before:           Sun 01 Oct 2023 01:29:03 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9621
IP address blocks:        125.2.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct  1 01:29:03 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F5C3EDDA39731F81F2EEE097F803841E3F7B11B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:2f:f8:ae:42:5b:26:40:33:e3:7b:eb:e8:
                    76:16:5b:ed:29:19:71:e9:19:1d:e8:1e:c1:b7:5a:
                    b5:61:2a:6a:6a:49:4a:b0:9b:e8:d5:6d:42:a2:08:
                    b2:2e:0f:fa:e6:a6:d6:bb:2d:03:7a:74:5c:f1:e1:
                    b3:02:ae:c2:9d:61:6d:70:a4:88:6e:44:32:52:35:
                    64:89:0b:29:25:50:fe:cb:5b:b3:9c:46:38:42:51:
                    d9:1a:4f:ab:09:53:32:df:84:00:66:07:29:fa:db:
                    d8:17:50:87:11:da:45:45:c6:5e:c2:3c:34:3f:4f:
                    a3:02:e9:39:eb:ef:1c:67:9c:c2:e4:5f:dd:24:9c:
                    a9:36:37:83:6a:11:92:83:b0:a3:1f:bd:5c:30:24:
                    fb:ea:42:bb:8f:bc:5f:b8:21:c8:a1:b3:38:ea:97:
                    23:ec:75:af:c7:fd:f1:68:05:5e:40:06:44:02:34:
                    58:9c:c3:64:fa:df:42:55:06:f8:3d:e9:1a:b2:2f:
                    d6:b3:4a:5a:28:2b:9d:13:f6:a1:5c:b3:42:83:40:
                    83:1d:bb:ce:7e:70:2b:f5:3c:f2:f2:58:07:00:7f:
                    1f:7f:cc:8a:00:70:a5:d8:2a:02:18:c9:19:5c:68:
                    28:d9:f2:c3:54:ba:dd:dc:24:1a:97:07:b0:94:cb:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:ED:DA:39:73:1F:81:F2:EE:E0:97:F8:03:84:1E:3F:7B:11:B5
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/9cPt2jlzH4Hy7uCX-AOEHj97EbU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:87:05:5f:53:1b:f9:85:a0:47:21:b2:90:3a:fc:26:7e:
         57:88:45:49:d8:50:93:4a:c3:9f:c2:19:03:b0:52:1e:0b:6c:
         71:cb:0d:63:c0:7f:d1:f3:15:4a:8e:d4:3a:2a:50:c6:c2:55:
         b5:ab:38:70:52:f9:d1:94:83:97:a9:dd:ff:04:10:9e:1a:f0:
         f7:b8:f9:d0:35:d7:44:67:94:56:8f:8b:9a:44:1b:d5:76:21:
         24:df:b5:20:97:de:a3:55:9a:43:24:f5:49:70:f6:35:b0:99:
         e4:ab:d9:b9:2f:e2:55:f7:5d:6a:45:b0:47:a1:46:fa:af:24:
         cd:df:9a:9e:3b:93:36:1f:21:a1:53:05:60:04:6c:7c:af:fc:
         4c:ca:39:b7:f5:fd:63:46:c0:c1:56:de:64:d0:5a:72:5c:88:
         d4:d4:e1:e8:53:4d:a8:4f:ba:a1:2f:91:18:5e:d6:81:de:f3:
         0d:c9:5d:f2:b2:7e:18:f1:18:50:c7:6b:de:44:9e:9a:82:eb:
         26:27:4e:1f:de:15:e7:a4:d5:08:fc:44:4b:d2:ca:9b:d8:ef:
         d4:96:5b:8a:25:24:e6:db:a0:e1:66:3d:cc:19:7c:5a:b6:d6:
         3c:5b:e5:5a:17:7a:f9:8a:7f:e4:8f:4e:09:ce:27:b9:b9:09:
         30:c4:03:6f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4
MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIzMTAwMTAx
MjkwM1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRjVDM0VEREEzOTczMUY4
MUYyRUVFMDk3RjgwMzg0MUUzRjdCMTFCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKkuL/iuQlsmQDPje+vodhZb7SkZcekZHegewbdatWEqampJSrCb
6NVtQqIIsi4P+uam1rstA3p0XPHhswKuwp1hbXCkiG5EMlI1ZIkLKSVQ/stbs5xG
OEJR2RpPqwlTMt+EAGYHKfrb2BdQhxHaRUXGXsI8ND9PowLpOevvHGecwuRf3SSc
qTY3g2oRkoOwox+9XDAk++pCu4+8X7ghyKGzOOqXI+x1r8f98WgFXkAGRAI0WJzD
ZPrfQlUG+D3pGrIv1rNKWigrnRP2oVyzQoNAgx27zn5wK/U88vJYBwB/H3/MigBw
pdgqAhjJGVxoKNnyw1S63dwkGpcHsJTLVN0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT1w+3aOXMfgfLu4Jf4A4QeP3sRtTAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn
4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ
TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84OTcvOWNQdDJqbHpINEh5N3VDWC1BT0VIajk3RWJVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBX0CADANBgkqhkiG9w0BAQsFAAOCAQEAQf2HBV9TG/mFoEchspA6/CZ+V4hF
SdhQk0rDn8IZA7BSHgtsccsNY8B/0fMVSo7UOipQxsJVtas4cFL50ZSDl6nd/wQQ
nhrw97j50DXXRGeUVo+LmkQb1XYhJN+1IJfeo1WaQyT1SXD2NbCZ5KvZuS/iVfdd
akWwR6FG+q8kzd+anjuTNh8hoVMFYARsfK/8TMo5t/X9Y0bAwVbeZNBaclyI1NTh
6FNNqE+6oS+RGF7Wgd7zDcld8rJ+GPEYUMdr3kSemoLrJidOH94V56TVCPxES9LK
m9jv1JZbiiUk5tug4WY9zBl8WrbWPFvlWhd6+Yp/5I9OCc4nubkJMMQDbw==
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:50:38 2024 by rpki-client on console-ams.rpki-client.org